kldunload Ratal trap 12: page fault

[Matthew Dillon]

:Hello All,
:
:I was the poster of this on -stable.  No one replied to me after that post.  I
:still have the kernel.debug and the vmcore.

    It looks like it may be the module release loop on lines 418-432.  I
    suspect that the 'next' pointer is being recursively released and winding
    up invalid, in which case it should be possible to fix by temporarily
    bumping next->refs within the loop, then checking for a ref-count of 1
    and releasing it as appropriate.  I will attempt to reproduce the crash
    and see if that fixes it.

    This could also be the same problem that esmith is reporting.

					-Matt
					Matthew Dillon 
					<dillon at xxxxxxxxxxxxx>

:fault virtual address   = 0xc15e20b8
:fault code              = supervisor read, page not present
:instruction pointer     = 0x8:0xc15e20b8
:..
:
:487             if (dumping++) {
:(kgdb) where
:...
:#6  0xc15e20b8 in ?? ()
:#7  0xc0141358 in linker_file_unload (file=0xc114d100)
:    at /devel/freebsd/src/sys/kern/kern_linker.c:434
:#8  0xc01413b0 in linker_file_unload (file=0xc14e2a80)
:...